Filtered by vendor Getkirby
Subscriptions
Total
24 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2018-16623 | 1 Getkirby | 1 Kirby | 2019-05-13 | N/A |
Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown. | ||||
CVE-2018-16630 | 1 Getkirby | 1 Kirby | 2019-02-26 | N/A |
Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file. | ||||
CVE-2018-16627 | 1 Getkirby | 1 Kirby | 2019-02-26 | N/A |
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature. | ||||
CVE-2018-16628 | 1 Getkirby | 1 Kirby | 2019-02-26 | N/A |
panel/login in Kirby v2.5.12 allows XSS via a blog name. |